What’s Vulnerable › Vulnerabilities

CVE-2022-41339

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-11-12 · updated 2026-06-17
• Weakness: CWE-269

Description

In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation.

Affected products

• Zohocorp Manageengine Mobile Device Manager Plus: 10.1.2207.4

References

• https://www.manageengine.com/mobile-device-management/kb/CVE-2022-41339.html
• https://www.manageengine.com/mobile-device-management/kb/CVE-2022-41339.html

Get alerted when CVE-2022-41339 or the next vulnerability affects your stack